?pForceReexportACFRegisterPlugin@@3PEBXEB
ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
PluginHookCallback
Static task
static1
Behavioral task
behavioral1
Sample
b9c9d370a7397361ffd1dfbeda68fb291d965cfd8861b2a37e0b0974f5fd5f7d.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b9c9d370a7397361ffd1dfbeda68fb291d965cfd8861b2a37e0b0974f5fd5f7d.dll
Resource
win10v2004-20231023-en
Target
b9c9d370a7397361ffd1dfbeda68fb291d965cfd8861b2a37e0b0974f5fd5f7d
Size
2.0MB
MD5
6fdff6ae32062283881ecad65fe16d88
SHA1
572c0c7d155c9213b9aa11aff38299cc4de4772d
SHA256
b9c9d370a7397361ffd1dfbeda68fb291d965cfd8861b2a37e0b0974f5fd5f7d
SHA512
21af9649b318a048ae88371522b4f2623628a9e8b82797da7a3f199c16bde54d7e30b4a9538852cd1eec10e0cc0a73a9492acd80396bc8bb5f7f20fab2333868
SSDEEP
49152:DRVtcj4QsOu5tq5nqRCjR2qXOXmPmravnQ9Lv:/LODnqSerj
Checks for missing Authenticode signature.
resource |
---|
b9c9d370a7397361ffd1dfbeda68fb291d965cfd8861b2a37e0b0974f5fd5f7d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CopyFileW
GetLongPathNameW
GetLocaleInfoA
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
SetPriorityClass
GetCurrentProcess
VirtualQuery
GetModuleFileNameA
GetProcessAffinityMask
GlobalMemoryStatusEx
GetProcessTimes
HeapLock
HeapWalk
HeapUnlock
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
Sleep
RaiseException
CreateThread
SetThreadPriority
GetCurrentThread
TerminateThread
CloseHandle
SetLastError
SetFileAttributesA
FindFirstFileW
FindNextFileW
FindClose
GetDiskFreeSpaceExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetErrorMode
CreateMutexA
ReleaseMutex
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
GetFileSizeEx
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
SetEndOfFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetStdHandle
GetCurrentThreadId
GetProcAddress
LoadLibraryW
GetLastError
FreeLibrary
LockResource
LoadResource
SizeofResource
WaitForSingleObject
FindResourceA
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
FormatMessageA
LocalFree
GetLocaleInfoEx
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindFirstFileExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
AreFileApisANSI
DeviceIoControl
GetModuleHandleW
CreateDirectoryExW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
EncodePointer
DecodePointer
LCMapStringEx
InitializeCriticalSectionEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
TerminateProcess
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
DeleteFileW
GetProcessHeap
RemoveDirectoryW
SetStdHandle
ExitThread
HeapSize
IsWindowEnabled
MessageBoxW
IsWindow
GetClassInfoExA
RegisterClassExA
CreateWindowExW
EnumThreadWindows
EnableWindow
SetParent
GetWindowRect
GetDesktopWindow
MessageBoxA
UnregisterClassW
DefWindowProcA
GetWindowLongPtrA
SetWindowPos
DestroyWindow
SetWindowLongPtrA
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
SHGetFolderPathW
CoInitialize
CoUninitialize
ImageUnload
ImageLoad
UrlCreateFromPathW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
?pForceReexportACFRegisterPlugin@@3PEBXEB
ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
PluginHookCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ